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In the Claims: j 

1 . (Original) A system for protected data transmission in ring-shaped bus systems, comprising 

i 

- a control unit (1) which sends output data and checking signals for a control process to 
peripheral units (4, 7, 8, 9, 12), 

- a peripheral monitoring unit (4) which has a first transfer unit (5) for monitoring the 

transmitted data and a second transfer unit (6) for monitoring data to be read batk into the 

j 

controlunit (1), and 

- at least one peripheral safety-related unit (9) for receiving or transmitting safety-related 
data, in which data are temporarily stored for output, which has a checking logij: (11) for 

monitoring the temporarily stored data and an output unit (10) for outputting the 

| 

temporarily stored data, j 

i 

the temporarily stored data being monitored by the checking logic (1 1) in such a manner 

i 

that, in the case of a fault, a safe state of the output unit (10) for the control probess is 
initiated, I 

i 

the first transfer unit (5) monitoring the data sent out by the control unit (1), in |such a 
manner that, in the case of a fault, release data for the peripheral safety-related |unit (9) 
are suppressed or deleted so that the faulty data do not reach the control proces^ 
particularly data transmission sequences, wherein the input data of the peripheral safety- 
related unit (9) and its temporarily stored data are read back via the second transfer unit 

(6). j 
2. (Original) The system as claimed in claim 1, characterized in that the temporarily jstored data 
and the input data of the peripheral safety-related unit (9) are provided to the peripheral 
monitoring unit (4). 
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3. (Previously Presented) The system as claimed in claim 1, characterized in that t^e 

peripheral safety-related unit (9) reads back the temporarily stored data via a bu& unit 
(23). ; 

4. (Previously Presented) The system as claimed in claim 1 , characterized in that tlje 

peripheral safety-related unit (9) has a buffer (27) which is read back by a bus unit (23) 
and is thus checked by the peripheral monitoring unit (4) even before release to the 
control process, particularly of data transmitted via the bus, via the output logic! (28) with 

i 

the output signal (29). j 

I 

5. (Previously Presented) The system as claimed in claim 3, characterized in that the 

l 

peripheral safety-related unit (9) comprises a further bus unit (22) so that the peripheral 

i 

safety-related unit (9) has redundant input channels (24, 25) and thus redundantly 
monitors the connected control process and can detect a fault. 

6. (Previously Presented) The system as claimed in claim 1, characterized in that the 

checking logic (11) decides whether the data stored in the buffer (27) are outpu't via the 
output logic (28). 

7. (Previously Presented) The system as claimed in claim 1, characterized in that the 

checking logic (11) releases or deletes the temporarily stored data. 

8. (Previously Presented) The system as claimed in claim 1, characterized in that the 

peripheral monitoring unit (4) with the first transfer unit (5) is capable of manipulating 
the data for the peripheral safety-related unit (9). 

9. (Previously Presented) The system as claimed in claim 1, characterized in that the 

i 

peripheral monitoring unit (4) overwrites data of the SPC. 



Meyer-Grafe (H) 01PH0389USP 10/009,444 
Response to Office Action mailed January 4, 2005 
Submitted May 12, 2005 by FAX 



PAGE 5/23 - RCVD AT 5/12/2005 2:43:17 PM [Eastern Daylight Time] " SVR:USPTO-EFXRF-1/24 * DNiS: 2733057 " CSID:5053230805 - DURATION (mm-ss): 08-08 



05/12/2005 12:47 FAX 5053230865 M OBERT KESTENBAUM @)006 



10. (Previously Presented) The system as claimed in claim 1, characterized in that th;e 

agreement to a data output from the peripheral safety-related unit (9) is prevented by the 
overwriting of the data. \ 

1 1 . (Previously Presented) The system as claimed in claim 1, characterized in that the 

checking logic (1 1) receives from the peripheral monitoring unit (4) an information item 

i 
j 

which prevents a faulty output. 

12. (Previously Presented) The system as claimed in claim 1, characterized in that t^e 

peripheral safety-related unit (9) only becomes active if it has received an agreement for 

! 

the data of the output unit (10) via the checking unit (1 1). j 

1 3 . (Previously Presented) The system as claimed in claim 1 , characterized in that tie 

peripheral units (4, 7, 8, 9, 12) themselves can perform logic operations and thus a higher 
process speed is achieved in the overall combined operation. 

14. (Previously Presented) The system as claimed in claim 1 , characterized in that the 

I 

peripheral monitoring unit (4) itself handles control functions and thus a combined 

i 

operation with a safety control unit is produced. 

i 

15. (Previously Presented) The system as claimed in claim 1, characterized in that the 

j 

peripheral safety-related unit (9) manages with standard non-safety-related modules for 

i 
i 

the bus traffic and does not need any special safety-related modules. 

16. (Currently Amended) The system as claimed in claim 1, characterized in that th e function 

the system is operable in standard bus systems and is capable of operating without 

additional installation of further bus systems or special components. ' 

j 
i 

17. (Currently Amended) The system as claimed in claim 1, characterized in that the function 

i 

can bo installed the system is installable subsequently by adding the peripheral! 

i 
j 
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monitoring unit (4) and exchanging normal peripheral units for peripheral safety-related 
units (9). 1 

18. (Previously Presented) The system as claimed in claim 1, characterized in that the safety 

function of the system can also be subsequently expanded by adding hardware elements 
or software modules. 

19. (Original) The system for protected data transmission, particularly in ring-shaped bus 

systems, in which a peripheral monitoring unit (4) checks the data sent out by a jcontrol 

unit (1) and examines them for faults and in the case of a fault suppresses or delates 

j 
i 

release data for a peripheral safety-related unit (9) so that a fault cannot reach th|e control 

i 

process, particularly not data transmission sequences. j 

i 
i 

20. (Original) The system as claimed in claim 19, in which temporarily stored data of the 

| 

peripheral safety-related unit (9) are read via a bus unit (23) and are monitored and 
detected by a checking logic (11). 

21 . (Previously Presented) The system as claimed in claim 19, in which a safe state cjf data 

transmission, particularly of the output unit (10), is initiated by the checking logic (1 1). 

22. (Original) A peripheral safety-related unit in a system for protected data transmission in 

1 
i 

ring-shaped bus systems, comprising 

« 

- two bus units (22, 23), to forward the output data of a bus unit (22) also to the input 
section of the other bus unit (23) in order to be able to fetch information from the control 
process via redundant input channels (24, 25) and in order to provide the output data of a 
peripheral monitoring unit (4) for read-back, 

- a buffer (27) in which the output data are stored before their release, 

- an output logic (28) via which the temporarily stored data are output, and i 
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- a checking logic (11) which decides whether the data stored in the buffer (27) jare output 
via the output logic (28). 

23. (Original) The peripheral safety-related unit as claimed in claim 20, characterized in that the 

I 

checking logic (11) releases or deletes the temporarily stored data. j 

24. (Original) The peripheral safety-related unit as claimed in claim 22, characterized in that the 

checking logic (11) receives information from the peripheral monitoring unit in order 

I 

to be able to prevent a faulty output by this means. j 

i 
I 

! 

I 
i 

! 
; 

! 
I 

| 

i 

i 
i 

i 
i 
| 

j 

! 
| 

! 

i 

I 

! 
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i 
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